CVE-2013-4446

The _json_decode function in plugins/context_reaction_block.inc in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal, when using…

published December 7, 2013

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

The _json_decode function in plugins/context_reaction_block.inc in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal, when using a version of PHP that does not support the json_decode function, allows remote attackers to execute arbitrary PHP code via unspecified vectors related to Ajax operations, possibly involving eval injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01530 · 74.5th percentile
Published
2013-12-07T20:00Z
EPSS history
Timeline
  • 07 DEC 20:00Z
    The _json_decode function in plugins/context_reaction_block.inc in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal, when using…
    cvelistv5